This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json) Hash identifier: wNCOJI+u9j0QQf1xlYRI6O2BWlA0pXEaTTKEeTkHvHs= Subject key identifier: D7:21:35:0F:4D:27:A0:F5:04:61:21:6D:C3:59:3F:78:70:3F:5F:B4 Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd Certificate serial: 019AF19AB5727794CA47392DAEC80321D108 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft Manifest number: 0C9C Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (hash: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=) 2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: Ouy3cmIhFu44HT2i+K/jGKH3kiZrtIJah37v5h7+yVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b5:72:77:94:ca:47:39:2d:ae:c8:03:21:d1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=d721350f4d27a0f50461216dc3593f78703f5fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:44:e6:58:b3:33:24:38:ae:67:50:77:32:da: c5:8e:af:10:9d:9e:dc:79:75:9e:80:bf:d6:4d:f2: 19:17:a0:dd:b2:36:58:83:5b:00:60:32:16:ec:65: 36:7a:99:10:3e:43:a3:4e:ca:67:16:28:c4:91:19: 26:f0:e7:6b:44:93:43:4d:a1:66:66:18:85:cc:92: e0:31:7f:bb:8d:37:d0:9e:80:5b:e2:81:70:ac:76: 33:1c:31:3a:69:4a:b3:24:e6:65:ea:ae:c2:18:21: ba:62:7d:f3:2c:d3:03:43:e2:60:88:2b:57:3e:13: 66:19:49:c3:74:74:e3:aa:e3:c8:cb:08:41:f9:a0: 0b:d4:ad:fa:07:1b:9e:5c:23:fc:aa:d0:91:39:c8: 25:88:77:e3:2d:3f:f7:c7:94:ce:f5:2d:dd:21:87: d3:6c:4c:e9:6c:86:4f:9b:23:4a:d1:a5:02:f3:b3: f5:d4:b3:1a:f4:d6:79:3d:7c:0a:ee:5b:ec:94:91: 37:6c:44:60:a6:b3:63:26:6a:15:dc:65:0b:d5:6f: 1d:41:62:f3:33:c2:f2:87:9f:5d:a2:97:db:99:cf: af:6c:2a:a9:ed:d0:12:16:e4:05:d0:14:7d:da:09: c0:d6:20:3f:52:e1:22:a4:70:5c:97:93:41:fb:3c: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:35:0F:4D:27:A0:F5:04:61:21:6D:C3:59:3F:78:70:3F:5F:B4 X509v3 Authority Key Identifier: keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9a:b7:e4:ed:3c:c5:2c:62:5b:47:95:d0:2a:ea:fd:67:33: b6:d6:34:a4:4b:1c:d9:83:b9:b3:cb:4a:43:6c:0f:2d:1c:e0: 56:98:48:e5:e0:96:8c:61:a5:ad:14:d5:e6:bf:cd:ab:69:a3: 87:e5:0d:03:9e:06:6b:c1:2d:3a:c2:ba:95:b9:1a:a0:c1:30: 73:6d:01:94:6f:ab:c6:da:6a:a2:40:1d:14:12:1a:03:ef:df: b8:c4:ea:3d:4e:97:0c:d5:07:c1:45:6b:ac:cd:54:6f:8f:75: fc:b0:ac:f0:e2:5c:43:2c:61:d6:46:49:57:e7:88:17:81:c9: f1:6c:50:9f:c5:9c:a4:69:74:2e:74:44:4f:ef:6d:d5:3f:68: ad:2a:02:87:49:17:ba:35:54:46:94:04:3c:b0:ee:79:96:df: 5c:ea:15:0b:19:4d:39:ee:7d:59:bd:66:07:88:ee:11:7e:11: 76:74:5c:d1:8f:3b:e3:6c:08:8b:36:66:2e:25:7d:ea:d7:71: 30:8c:9b:a1:b1:6c:cc:0c:d5:21:ed:47:3a:5a:96:99:1e:d4: 8f:9c:89:c9:f3:be:6a:a7:2a:97:a9:1c:a0:b9:a9:ff:54:99: a4:f2:82:5d:b2:0a:3b:34:9f:3d:8a:e7:b4:65:42:ab:4e:80: 63:77:74:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrVyd5TKRzktrsgDIdEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2M5ZTg0ODdjOThiNDUzZjk3NGYyMDMxN2VjZTNkNzBm NGQ1ZGQwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD EyhkNzIxMzUwZjRkMjdhMGY1MDQ2MTIxNmRjMzU5M2Y3ODcwM2Y1ZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUTmWLMzJDiuZ1B3MtrFjq8QnZ7c eXWegL/WTfIZF6DdsjZYg1sAYDIW7GU2epkQPkOjTspnFijEkRkm8OdrRJNDTaFm ZhiFzJLgMX+7jTfQnoBb4oFwrHYzHDE6aUqzJOZl6q7CGCG6Yn3zLNMDQ+JgiCtX PhNmGUnDdHTjquPIywhB+aAL1K36BxueXCP8qtCROcgliHfjLT/3x5TO9S3dIYfT bEzpbIZPmyNK0aUC87P11LMa9NZ5PXwK7lvslJE3bERgprNjJmoV3GUL1W8dQWLz M8Lyh59dopfbmc+vbCqp7dASFuQF0BR92gnA1iA/UuEipHBcl5NB+zychQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNchNQ9NJ6D1BGEhbcNZP3hwP1+0MB8GA1UdIwQY MBaAFBU8noSHyYtFP5dPIDF+zj1w9NXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZmY2MzMtZWI0YS00ZTE4LWFkNTYt MGQwMThkYmNjN2NiLzEvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wZmY2MzMtZWI0YS00ZTE4LWFkNTYtMGQwMThkYmNjN2Ni LzEvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApq35O08 xSxiW0eV0Crq/WczttY0pEsc2YO5s8tKQ2wPLRzgVphI5eCWjGGlrRTV5r/Nq2mj h+UNA54Ga8EtOsK6lbkaoMEwc20BlG+rxtpqokAdFBIaA+/fuMTqPU6XDNUHwUVr rM1Ub491/LCs8OJcQyxh1kZJV+eIF4HJ8WxQn8WcpGl0LnRET+9t1T9orSoCh0kX ujVURpQEPLDueZbfXOoVCxlNOe59Wb1mB4juEX4RdnRc0Y8742wIizZmLiV96tdx MIybobFszAzVIe1HOlqWmR7Uj5yJyfO+aqcql6kcoLmp/1SZpPKCXbIKOzSfPYrn tGVCq06AY3d0aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:46 2025 by rpki-client